Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
File: 1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft (raw, json)
Hash identifier: EDSZSdBVLSawf56hzuhgsFdgwxI23ET0TSb5TdEgJlg=
Subject key identifier: 21:DD:82:EA:29:6E:4D:72:E0:86:1F:7B:5B:0D:FB:2B:74:4D:B2:21
Authority key identifier: 1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
Certificate issuer: /CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Certificate serial: 5882219CCC70759ACCC52E18FC656B9DD15B4EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
Manifest number: 9F
Signing time: Sat 06 Sep 2025 23:02:41 +0000
Manifest this update: Sat 06 Sep 2025 22:57:41 +0000
Manifest next update: Mon 08 Sep 2025 01:01:41 +0000
Files and hashes: 1: 1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl (hash: vhaSkhr3rmWXqUSJBMNkl2Sq5o2/D0x2atbHHb9nObY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl
rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:82:21:9c:cc:70:75:9a:cc:c5:2e:18:fc:65:6b:9d:d1:5b:4e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Validity
Not Before: Sep 6 22:57:41 2025 GMT
Not After : Sep 8 01:01:41 2025 GMT
Subject: CN=21DD82EA296E4D72E0861F7B5B0DFB2B744DB221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:1b:11:bc:b0:3b:58:d4:1f:54:44:b3:35:
31:04:1d:d6:9b:b8:d4:04:8b:37:8a:7d:51:85:25:
1f:f2:1d:57:b5:a3:a3:fa:ea:fb:e5:fd:19:0d:01:
a7:b5:31:7f:4d:7d:74:db:93:71:46:a9:db:75:7f:
e0:00:af:63:4b:2e:4d:f0:5b:02:77:15:b4:c3:f4:
9f:bc:50:77:46:30:fe:a4:f8:24:f6:70:96:86:e0:
20:5a:e6:f4:43:c6:75:ae:b0:be:c7:80:ca:27:9a:
5f:d0:17:e6:7a:57:21:01:4b:e2:5f:cf:1d:0e:cc:
15:e5:f8:ef:8a:af:8a:2c:40:ae:73:27:e4:dc:3f:
61:85:4e:76:bf:9f:9b:b0:8a:30:8a:32:dc:57:02:
7a:48:47:c8:da:cd:5b:23:53:ce:6d:80:46:a7:e8:
47:e7:79:db:4e:53:1b:55:41:52:b2:c7:d0:95:79:
f8:4d:ef:cb:75:01:88:28:15:91:70:a3:ba:00:fb:
d8:c6:2c:e8:70:af:6b:15:70:d2:61:02:6a:ba:60:
9e:6e:82:99:f6:97:43:63:c6:28:d3:f4:4f:f2:f9:
02:36:9b:c0:a7:aa:8f:24:13:24:10:1f:e1:26:ab:
a0:02:c6:e8:98:55:b2:01:41:4a:9d:48:72:29:84:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:82:EA:29:6E:4D:72:E0:86:1F:7B:5B:0D:FB:2B:74:4D:B2:21
X509v3 Authority Key Identifier:
keyid:1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1c:12:28:ed:59:2b:87:01:5f:93:3a:b5:29:f0:00:56:77:
10:dd:ad:60:52:f6:ef:9f:e4:d0:3e:9d:cb:6c:2f:d2:07:e6:
52:92:ab:a7:f9:c9:72:54:01:cc:90:37:af:c8:2d:ba:25:c0:
42:be:1b:47:49:5a:a3:db:ef:08:0b:3a:66:df:d1:9c:18:c9:
0c:81:dd:ae:be:de:82:4d:b5:28:ce:4f:3f:e3:77:b4:35:83:
d7:85:08:83:cc:71:77:9c:d7:34:74:33:d1:18:99:95:79:7f:
d6:46:19:80:12:39:fd:1a:83:84:7a:59:1d:46:13:d5:e9:dd:
d8:ec:e2:1b:83:20:af:1c:fa:cb:1a:31:21:8c:0b:84:c9:88:
aa:2f:75:3a:b5:db:76:c8:02:b2:c2:48:cb:97:bc:32:1c:a3:
ad:78:2b:68:55:98:60:53:0b:c7:cb:e9:9b:d5:16:c4:ab:c6:
71:b4:c5:1d:8f:10:58:6d:8c:3e:c7:e5:d5:78:d1:d8:64:45:
c7:51:78:68:49:0a:99:c0:b0:39:19:29:b6:2e:cc:e6:90:42:
37:fd:3b:2f:7c:7c:37:76:ce:75:7a:a3:61:39:71:19:a0:a3:
26:36:9c:e1:5a:23:8f:23:2c:35:7f:9a:7d:1a:2c:51:3b:c8:
81:70:95:ac
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWIIhnMxwdZrMxS4Y/GVrndFbTvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWFjNDZhYWZkMTVlZWUwYjFmZTYwNzJlNGYwZGRmMjcx
YzAzZWU1MTAeFw0yNTA5MDYyMjU3NDFaFw0yNTA5MDgwMTAxNDFaMDMxMTAvBgNV
BAMTKDIxREQ4MkVBMjk2RTRENzJFMDg2MUY3QjVCMERGQjJCNzQ0REIyMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiGRsRvLA7WNQfVESzNTEEHdab
uNQEizeKfVGFJR/yHVe1o6P66vvl/RkNAae1MX9NfXTbk3FGqdt1f+AAr2NLLk3w
WwJ3FbTD9J+8UHdGMP6k+CT2cJaG4CBa5vRDxnWusL7HgMonml/QF+Z6VyEBS+Jf
zx0OzBXl+O+Kr4osQK5zJ+TcP2GFTna/n5uwijCKMtxXAnpIR8jazVsjU85tgEan
6EfnedtOUxtVQVKyx9CVefhN78t1AYgoFZFwo7oA+9jGLOhwr2sVcNJhAmq6YJ5u
gpn2l0NjxijT9E/y+QI2m8Cnqo8kEyQQH+Emq6ACxuiYVbIBQUqdSHIphA11AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUId2C6iluTXLghh97Ww37K3RNsiEwHwYDVR0j
BBgwFoAUGsRqr9Fe7gsf5gcuTw3fJxwD7lEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWVhZjFmNmItMjA4MS00NjdhLTgwMzktZjFmOTY5YjRm
YjY2LzAvMUFDNDZBQUZEMTVFRUUwQjFGRTYwNzJFNEYwRERGMjcxQzAzRUU1MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dzUnFyOUZlN2dzZjVnY3VUdzNmSnh3
RDdsRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZWFmMWY2Yi0y
MDgxLTQ2N2EtODAzOS1mMWY5NjliNGZiNjYvMC8xQUM0NkFBRkQxNUVFRTBCMUZF
NjA3MkU0RjBEREYyNzFDMDNFRTUxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRwSKO1ZK4cBX5M6tSnw
AFZ3EN2tYFL275/k0D6dy2wv0gfmUpKrp/nJclQBzJA3r8gtuiXAQr4bR0lao9vv
CAs6Zt/RnBjJDIHdrr7egk21KM5PP+N3tDWD14UIg8xxd5zXNHQz0RiZlXl/1kYZ
gBI5/RqDhHpZHUYT1end2OziG4Mgrxz6yxoxIYwLhMmIqi91OrXbdsgCssJIy5e8
MhyjrXgraFWYYFMLx8vpm9UWxKvGcbTFHY8QWG2MPsfl1XjR2GRFx1F4aEkKmcCw
ORkpti7M5pBCN/07L3x8N3bOdXqjYTlxGaCjJjac4VojjyMsNX+afRosUTvIgXCV
rA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:05 2025 by rpki-client